fix(cv): isolate document parsing

Run untrusted document decoders in a secret-free, resource-bounded child process and terminate its process tree on deadline. Harden the production container and enforce parser and lint gates in CI.
2026-08-30 11:12:25 +02:00
parent a8bf505ce5
commit 19c5251612
13 changed files with 677 additions and 176 deletions
@@ -64,6 +64,11 @@ EXTERNAL_AI_ALLOWED_TASKS=cv-normalize,cv-classify,cv-rewrite
 EXTERNAL_AI_MAX_PROMPT_CHARS=24000
 LOCAL_AI_CIRCUIT_FAILURE_THRESHOLD=3
 LOCAL_AI_CIRCUIT_OPEN_SECONDS=30
+# Isolated CV document decoder budgets. Increase only after benign-file measurement.
+PARSER_TIMEOUT_SECONDS=25
+PARSER_CPU_SECONDS=20
+PARSER_MEMORY_MIB=512
+PARSER_STALE_WORK_SECONDS=3600
 GEMINI_API_KEY=
 GEMINI_MODEL=gemini-2.0-flash
 GROQ_API_KEY=